Vintela Authentication Services
Support Pack for ActiveRoles Server Web Interface
(VAS Support Pack for ARS
)
version 1.2

Release Notes

June 2, 2008


Contents

Welcome to the VAS Support Pack for ARS
What's New
Known Issues
System Requirements
Global Operation
Getting Started
For More Information


Welcome to the VAS Support Pack for ARS

ActiveRoles Server offers a practical approach to automated user provisioning and administration, for maximum security and efficiency. It provides total control of user provisioning and administration for Active Directory.

Vintela Authentication Services integrates native Unix and Linux authentication and identity subsystems with Active Directory. It eliminates key vulnerabilities and end-user downtime, to minimize risk and lower costs.

Through the Support Pack for Vintela Authentication Services, ActiveRoles Server extends management control to Unix and Linux identities such as Unix-enabled users and groups. Query-based management views show all of the identities, business rules ensure and enforce appropriate administrative practices, permission templates make it easy to delegate identity management.

For more information about this Support Pack, refer to the Administrator's Guide included with the Support Pack release package.

Back to Top


What's New

The Support Pack includes the following new features:

  • Support for unique ID generation. New configuration objects and user interface extensions have been added to enable the use of ActiveRoles Server for creating and managing Unix user and group personality objects - new entities introduced with the Vintela Authentication Services version 3.0.
  • Support for ID constraints. A new set of user interface extensions is provided for Active Directory user and group object classes and for Unix personality object classes. These extensions add a number of pages and commands to the ActiveRoles Server Web Interface and the ActiveRoles Server console, enabling the management of Unix-specific information in Active Directory via ActiveRoles Server.
  • Support for Regular Expression constraints. A new suite of Policy Objects, with an extensive set of policy parameters, is provided to enable implementation of a wide variety of business rules and best practices as applied to the management of Unix-related identity information.
  • Support for ActiveRoles Server version 6.0.4 Version 1.2 of Quest Vintela Authentication Services Support Pack for ActiveRoles Server Web Interface is compatible with ActiveRoles Server version 6.0.4.
  • Better interoperability with the MMC Console.  If the VAS Administration Tools package (version 3.3.2 or higher) is installed on a computer running the ActiveRoles Server MMC Console the Unix account property pages will be able to take advantage of the constraints defined in ARS support pack policies.

Back to Top


Known Issues

The following issues are known to exist with this release of Quest ActiveRoles Server Support Pack for Vintela Authentication Services:

  • In ARS versions prior to 6.0.4, on the Web Interface pages for managing Unix personalities, the "Group ID", "User ID" and "Primary Group ID" fields cannot be left blank. A certain ID value must be specified in each of those fields; otherwise, the Web Interface returns "Error: input string was not in correct format." 
  • In large forests with many Unix users, the forest-unique ID generation may cause the web request to time out. In this case, you must use domain-unique ID generation and partition the ID namespace.
  • When you click the button to generate a unique ID, the cursor does not change to an hourglass.
  • The wizards for creating Unix user personalities and Unix group personalities identifies the associated Windows users or groups by their Distinguished Names rather than friendly names.
  • The Web Interface does not provide for a special icon to mark Unix user personality objects or Unix group personality objects. The default, generic icon is used instead of an object type-specific icon for those objects in the Web Interface.
  • The support pack is not intended to be upgraded.  You must uninstall any previous version of the support pack before installing the new version. 

Back to Top


System Requirements

This Support Pack runs on top of ActiveRoles Server, and requires the following to be deployed in your Active Directory environment prior to installing the Support Pack:

  • ActiveRoles Server version 5.2.5 or higher, including the Administration Service, Web Interface, and ActiveRoles Server console
  • Support for the Windows 2003 R2 RFC 2307 Active Directory Schema.

Note that in addition to the main requirements for ActiveRoles Server, which can be found in the Release Notes document for ActiveRoles Server, the following requirements must be met in order for this Support Pack to work:

  • Installation of the Support Pack configuration modules must be performed on a computer running the ActiveRoles Server Administration Service. The Setup program requires that the Administration Service be up and running to make all the necessary changes to the configuration of ActiveRoles Server.

Back to Top


Global Operation

This product was not enabled for international operation. Only U.S. English configurations of this product and U.S. English datasets are fully supported. Support for non-ASCII characters and/or non-English configurations may work appropriately, but these configurations have not been tested and this product should be used with caution in these environments. For specific support information, contact Quest customer support.

Back to Top


Getting Started

Contents of the Release Package

The release package of Quest Vintela Authentication Services Support Pack for ActiveRoles Server Web Interface contains the following items:

  • Setup file to install VAS Support Pack for ARS Web Interface (setup.msi)
  • Release Notes (release_notes.htm)
  • Administrator's Guide (vas_supportpack_ars_webinterface.pdf)

Installation Procedure

Follow these steps to install Quest ActiveRoles Server Support Pack for Vintela Authentication Services:

1.     Ensure that the Active Directory schema supports the Windows 2003 R2 RFC 2307 Schema in the domains you have registered with ActiveRoles Server.

2.     On the computer running the ActiveRoles Server Administration Service, run the Setup file to install the Support Pack configuration components and Web Interface extensions.

For more information on how to install, configure and use this Support Pack, refer to the Administrator's Guide included with the Support Pack release package.

Back to Top


For More Information

Contacting Quest Software

E-mail:

info@quest.com

Mail:

Quest Software, Inc.
World Headquarters
5 Polaris Way
Aliso Viejo, CA 92656
USA

Web site:

www.quest.com

 

Please refer to our Web site for regional and international office information.

Contacting Quest Support

Quest Support is available to customers who have a trial version of a Quest product or who have purchased a commercial version and have a valid maintenance contract. Quest Support provides around the clock coverage with SupportLink, our web self-service. Visit SupportLink at http://support.quest.com

From SupportLink, you can do the following:

  • Quickly find thousands of solutions (Knowledgebase articles and documents).
  • Download patches and upgrades.
  • Seek help from a Support engineer.
  • Log and update your case, and check its status.

View the Global Support Guide for a detailed explanation of support programs, online services, contact information, and policy and procedures. The guide is available at: http://support.quest.com/pdfs/Global Support Guide.pdf


This document contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser’s personal use without the written permission of Quest Software, Inc.

©2008 Quest Software, Inc. ALL RIGHTS RESERVED.

Quest, Quest Software, the Quest Software logo, Aelita, AppAssure, Benchmark Factory, Big Brother, DataFactory, DeployDirector, ERDisk, Fastlane, Final, Foglight, Funnel Web, I/Watch, Imceda, InLook, IntelliProfile, Internet Weather Report, InTrust, IT Dad, JClass, Jint, JProbe, Knowledge Xpert, LeccoTech, LiteSpeed, LiveReorg, Matrix Insight, Matrix.Net, MIQ, NBSpool, NetBase, Npulse, PerformaSure, PL/Vision, Quest Central, RAPS, SharePlex, Sitraka, SmartAlarm, Speed Change Manager, Speed Coefficient, Spotlight, SQL Firewall, SQL Impact, SQL LiteSpeed, SQL Navigator, SQLab, SQLGuardian, SQLProtector, SQL Watch, Stat, Stat!, StealthCollect, Tag and Follow, Toad, T.O.A.D., Vintela, Virtual DBA, Xaffire, and XRT are trademarks and registered trademarks of Quest Software, Inc in the United States of America and other countries. Other trademarks and registered trademarks used in this guide are property of their respective owners.

If you have any questions regarding your potential use of this material, contact:

Quest Software World Headquarters
LEGAL Dept
5 Polaris Way
Aliso Viejo, CA 92656

Web site:     www.quest.com

E-mail:         legal@quest.com

Disclaimer

The information in this document is provided in connection with Quest products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Quest products. EXCEPT AS SET FORTH IN QUEST'S TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, QUEST ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL QUEST BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF QUEST HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Quest makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. Quest does not make any commitment to update the information contained in this document.

Back to Top